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DETAILED ACTION 



1 . Claims 1-34 are pending in this office action. 

2. Applicant's arguments, filed February 22, 2006, have been fully considered but 
they are not persuasive. 

Rejections 

3. The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

Claim Rejections - 35 USC § 102 

4. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

5. Claims 1 2, 5-15, and 20-34 are rejected under 35 U.S.C. 102(b) as being 
anticipated by Tucker et al. (U.S. Patent No. 5,808,91 1 ). 

Regarding claim 1 , Tucker et al. teaches a system to facilitate secure 
communication, comprising: 

• A communication component operative to store an outgoing message received 
directly from an associated process, the outgoing message including a message 
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key having a key value, an attribute being associated with the communication 
component, the attribute having selectable attribute conditions that are 
inaccessible by the associated process (fig. 1, ref. num 120 and 122 within 
domain 106 and col. 3, lines 54 through col. 4, lines 9); and 
• A filter associated with the communication component, the filter controlling 

sending the stored outgoing message from the communication component based 
on the key value of the outgoing message and one of the attribute conditions (fig. 
1, ref. num 122 and col. 4, lines 46-55). 

Regarding claim 2 , Tucker et al. teaches wherein the communication component 
further comprises at least one storage device operative to store messages (fig. 2, ref. 
num 160). 

Regarding claim 5 , Tucker et al. teaches wherein the message key corresponds 
to a key associated with another communication component that is associated with a 
desired destination (fig. 1, ref. num 120 and 122 within domain 108). 

Regarding claim 6 , Tucker et al. teaches wherein the message key is a multi-bit 
field for storing data identifying a key associated with a destination communication 
component (fig. 1, ref. num 122). 
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Regarding claim 7 , Tucker et al. teaches wherein the filter is operative to prevent 
sending the outgoing message from the communication component upon detecting an 
invalid message key in the outgoing message (fig. 1, domain 1 is different from domain 
2, each having their own Xdoor 128). 

Regarding claim 8 , Tucker et al. teaches wherein key data having a range of at 
least one key value is associated with the communication component, the key data 
being inaccessible by the associated process, the filter controlling transmission of the 
outgoing message based on the validation of the message key as a function of one of 
the attribute conditions and the range of at least one key value (fig. 1 , ref. num 126 of 
domain 108, more than one FD belongs in the domain, and col. 2, lines 30-47). 

Regarding claim 9 , Tucker et al. teaches wherein the filter employs the attribute 
to define a valid range of at least one key value based on the at least one key value 
associated with the communication component, such that the filter provides different 
control in connection with a message having a message key within the valid range and 
a message having a message key outside the valid range (col. 2, lines 30-47 and col. 3, 
lines 54-65). 



Regarding claim 10 , Tucker et al. teaches wherein the key data identifies a 
plurality of key values (fig. 1 , multiple FD's point to one object). 
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Regarding claim 1 1 . Tucker et al. teaches wherein the filter is operative to permit 
whether a message having a message key in the valid range is sent from the 
communication component (fig. 1, ref. num 126 of domain 108, more than one FD 
belongs in the domain, and col. 2, lines 30-47). 

Regarding claim 12 , Tucker et al. teaches a system to facilitate secure 
communication between at least two processes, comprising: 

• A first queue operative to store a request received directly from a first of the at 
least two processes and, upon validation of the stored request, to send the 
stored request to a second of the at least two processes, the stored request 
including a destination address and a key having a key value (fig. 1, ref. num 122 
and col. 4, lines 46-55 and fig. 1, ref. num 102A and 102B); and 

• An interface operative to validate the stored request based on the key value of 
the stored request relative to at least one predetermined key value associated 
with the first queue, the at least ona key value associated with the first queue 
being unavailable to the first process (fig. 1, ref. num 120 and 122 within domain 
106 and col. 3, lines 54 through col, 4, lines 9). 

Regarding claim 13 , Tucker et al. teaches further comprising an attribute 
associated with the first queue, the attribute defining a valid range of key values based 
on the at least one key value associated with the first queue to control sending stored 
requests from the first queue (col. 3, line 66 through col. 4, line 9). 
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Regarding claim 14 , Tucker et al. teaches wherein the attribute has selectable 
attribute conditions that are unavailable to the first process and the valid range of 
message keys varies as a function of the attribute conditions and the at least one key 
value associated with the first queue (col. 3, line 66 through col. 4, line 9). 

Regarding claim 15 , Tucker et al. teaches wherein the at least one key value 
associated with the first queue further comprises a plurality of key values associated 
with the first queue and unavailable to the first process (fig. 1 , multiple FD's point to one 
object). 

Regarding claim 20 , Tucker et al. teaches wherein the interface is operative to 
prevent sending the request from the first queue if the request includes an invalid key 
(col. 3, lines 54-65). 

Regarding claims 21, 28, and 34 , Tucker et al. teaches a system/method/ 
computer readable medium to facilitate secure communication between at least two 
user-level processes, comprising: 

• Storage means for storing an outgoing message received from a first of the at 
least two processes, the outgoing message including a message key associated 
with a destination, an attribute being associated with the storage means, the 
attribute having selectable attribute conditions unavailable to user-level 
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processes (fig. 1 t ref. num 120 and 122 within domain 106 and col. 3, lines 54 
through col. 4, lines 9); and 
• Control means for controlling sending of the stored outgoing message from the 
storage means based on the message key and one of the attribute conditions 
(fig. 1, ref. num 122 and col. 4, lines 46-55). 

Regarding claim 22 , Tucker et al. teaches further comprising validation data 
associated with the storage means and unavailable to user-level processes, the control 
means controlling sending of the outgoing message based on the validation of the 
message key as a function of the attribute and validation data (col. 3, line 66 through 
col. 4, line 9). 

Regarding claim 23 , Tucker et al. teaches wherein the validation data comprises 
at least one key value (fig. 1 , multiple FD's point to one object). 

Regarding claim 24 , Tucker et al. teaches wherein control means is operative to 
control whether the stored message can be sent from the storage means based on the 
message key relative to a valid range of key values, which varies as a function of one of 
the attribute conditions and the validation data (fig. 1 , domain 1 is different from domain 
2, each having their own Xdoor 128 and col. 2, lines 30-47). 
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Regarding claims 25 and 29 , Tucker et al. teaches a system/computer readable 
medium to facilitate secure communication between at least two user-level processes, 
comprising: 

• Storage means for storing a request received directly from a first of the at least 
two processes and, upon validation of the stored request, for sending the stored 
request to a second of the at least two processes, the stored request including a 
key having a key value (fig. 2, ref. num 160 and fig. 3A, ref. num 174 to fig. 3B, 
ref. num 174 and col. 8, lines 22-47); and 

• Validation means for validating the stored request based on the key value of the 
stored request relative to at least one predetermined key value associated with 
the storage means, the at least one key value associated with the storage means 
being Unavailable to user-level processes (col. 3, line 66 through col. 4, line 9 
and fig. 2, ref. num 154). 

Regarding claim 26 , Tucker et al. teaches further comprising an attribute 
associated with the storage means, the attribute defining a valid range of key values 
based on the at least one key value associated with the storage means, the validation 
means controlling sending stored requests from the storage means according to the 
valid range of key values (col. 3, line 66 through col. 4, line 9). 



Regarding claim 27 , Tucker et al. teaches wherein the attribute has selectable 
attribute conditions that are not available to user-level processes, the valid range of key 
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values varying as a function of the attribute conditions and the at least one key value 
associated with the storage means (col. 3, line 66 through col. 4, line 9). 

Regarding claim 30 , Tucker et al. teaches a method to facilitate secure 
communication from a first user-level process in a system in which the first process is 
operable to communicate directly with hardware, comprising: 

• Storing an outgoing message received directly from the first process in an 
associated storage device, the outgoing message including a message key 
having a key value (fig. 2, ref. num 122 and 160); and 

• Controlling sending of the stored message to a second process based on the 
value of the message key relative to a predetermined at least one key value 
associated with the storage device, the at least one key value associated with the 
storage device being unavailable to the first process (fig. 3A, ref. num 174 to fig. 
3B, ref. num 174 and col. 8, lines 22-47). 

Regarding claim 31 , Tucker et al. teaches further comprising associating an 
attribute with the storage device that is operable to define a valid range of key values 
based on the at least. one key value associated with the storage device, and controlling 
sending of the stored message from the storage device based on the message key 
thereof and the defined valid range of key values (col. 3, line 66 through col. 4, line 9). 
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Regarding claim 32 , Tucker et al. teaches wherein the attribute has selectable 
attribute conditions not available to the first process, the valid range of key values 
varying as a function of the attribute conditions and the at least one key value 
associated with the storage device (col. 3, line 66 through col. 4, line 9). 

Regarding claim 33 , Tucker et al. teaches further comprising validating the 
message key relative to the at least one key value associated with the storage device, 
and, upon detecting an invalid message key, preventing the stored message from being 
sent from the storage device (col. 3, lines 54-65). 

Claim Rejections - 35 (JSC § 103 

6. Claims 3, 4, and 16-19 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Tucker et al. (USPN ( 91 1 ) in view of Neal et al. (U.S. Patent No. 6,766,467). 

Regarding claim. 3 , Tucker et al. teaches all the limitations of claims 1 and 2, 
above. However, Tucker et al. does not teach wherein the at least one storage device 
further comprises at least one queue operative to store messages being sent by the 
associated process. 

Neal et al. teaches wherein the at least one storage device further comprises at 
least one queue operative to store messages being sent by the associated process (fig. 
6, ref. num 620). 
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It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine the storage device containing at least one queue to 
store outgoing messages, as taught by Neal et al. , with the system of Tucker et al. It 
would have been obvious for such modifications because storage allows multiple 
messages to be prepared for sending. 

Regarding claim 4 , the combination of Tucker et al. in view of Neal et al. teaches 
wherein the at least one queue further comprises at least two queues, one of the at 
least two queues being operative to store messages being sent by the associated 
process and another of the at least two queues being operative to store messages 
being sent to the associated process (see fig. 6, ref. num 624 and 626 of Neal et al.). 

Regarding claim 16 , Tucker et al. teaches all the limitations of claims 12-14, 
above. However, Tucker et al. does not teach wherein the attribute is set to have one of 
at least a first condition and a second condition. 

Neal et al. teaches wherein the attribute is set to have one of at least a first 
condition and a second condition (col. 9, line 45 through col. 10, line 34). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine an attribute with at least two conditions, as taught by 
Neal et al. , with the system of Tucker et al. It would have been obvious for such 
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modifications because the two conditions provide a selection of either working or not 
working. 

Regarding claims 17 and 19 . the combination of Tucker et al. in view of Neal et 
aL teaches wherein the interface is operative to prevent the stored request from being 
sent from the first queue if the attribute has the [first/second] condition and the key has 
a value that agrees with the at least one key value associated with the first queue (see 
col. 3, lines 54-65 of Tucker et al.). 

Regarding claim 18 , the combination of Tucker et al. in view of Neal et al. 
teaches wherein the interface is operative to permit the stored request from being sent 
from the first queue if the attribute has the first condition and the key has a value that 
disagrees with the at least one key value associated with the first queue (see col. 2, 
lines 30-47 of Tucker et al. ). 

Response to Arguments 

7. Applicant argues: 

a. Tucker et al. does not teach a filter that controls the sending of a message 
based on the key value of the outgoing message and one of the attribute 
conditions (page 10 through page 12, second paragraph). 
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b. The dependent claims taught by the combination of Tucker et al. and Neal 
et al. do not fix the deficiencies of the independent claims (page 12, third 
paragraph through the end). 

Regarding argument (a), examiner disagrees with applicant. The use of the filed 
descriptor (figure 1) represents the key .value(s) as explained on column 3, lines 54-65. 
The handler procedure represents the selectable attribute as explained on column 4, 
lines 46-55. The handler has selectable attributes because of its use of invocation and 
argument passing. Different arguments can be passed and are therefore selectable 
attributes. The combination of the handler procedure 122 and the file descriptors 154 
create a secure communication. See column 7, lines 1-9. 

Regarding argument (b) t examiner disagrees with applicant. Based on the 
response by examiner for argument (a), above, the dependent claims stand as rejected. 

Conclusion 

8. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .1 36(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
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extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Brandon S. Hoffman whose telephone number is 571- 
272-3863. The examiner can normally be reached on M-F 8:30 - 5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on 571-272-3795. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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